Summary

• add a workflow-level npm registry state check before invoking tag-local publish scripts
• skip publish when the package version is already published and the requested dist-tag already points to it
• fail clearly if an immutable published version has the wrong dist-tag instead of retrying npm publish

Testing

• bun install --frozen-lockfile
• bun run lint
• bun run typecheck
• pre-push hook: lint, typecheck, test
• parsed workflow YAML with Python/PyYAML
• executed the new npm state guard locally with NPM_TAG=next; verified allagents@1.12.0-next.1 is already published and next points to it

Post-merge validation

• rerun Publish with channel=existing and ref=v1.12.0-next.1